FaceSign privacy & data

For verification data, the Customer is the data controller and FaceSign acts as a data processor on the Customer's behalf and instructions.

Facial biometric data, voice patterns, and behavioral signals collected during verification sessions.

Device type, operating system, browser information, IP address, and geolocation.

Pages visited, referral source, and similar usage data collected when you browse our websites.

conversation transcripts, interaction patterns, and verification outcomes.

Information provided by Customers to facilitate verification (e.g., name, email, account identifiers)

Providing identity verification and trust-decisioning services as instructed by our Customers.

Detecting and preventing fraud, including deepfakes, synthetic identities, and coercion.

Improving the accuracy and reliability of our verification technology, using de-identified, aggregated data that does not include biometric data.

Managing Customer accounts, billing, and support.

By default, captured media is automatically deleted within approximately 24 hours.

We retain demonstration session media and the associated session record for up to 24 months

FaceSign currently processes and stores verification data in the United States.

we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

A current subprocessor list is available on request to [email protected] .

for enterprise customers, any executed Data Processing Agreement (DPA).

You can ask us to delete your demonstration session at any time by contacting [email protected] , and we will do so.

Access: Request a copy of the personal data we hold about you.

Correction: Request correction of inaccurate personal data.

Deletion: Request deletion of your personal data, subject to legal retention requirements.

Portability: Request your data in a structured, machine-readable format.

Objection & restriction: Object to or restrict certain processing of your personal data.

Consent withdrawal: Withdraw consent to biometric processing at any time, without affecting processing already performed.

We do not sell personal information.